$ rpki-client -vvf rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft File: dLH8bMwnd13tH1lSWyh2Yci_6ig.mft (raw, json) Hash identifier: 45HuCVejYOZXpPMu+Fw+MWdmQYHl0b33kQfUF20+P84= Subject key identifier: 31:35:11:99:89:80:62:23:48:54:6C:14:48:57:F5:81:B6:7B:63:EA Authority key identifier: 74:B1:FC:6C:CC:27:77:5D:ED:1F:59:52:5B:28:76:61:C8:BF:EA:28 Certificate issuer: /CN=A91278AF/serialNumber=74B1FC6CCC27775DED1F59525B287661C8BFEA28 Certificate serial: 064A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dLH8bMwnd13tH1lSWyh2Yci_6ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft Manifest number: 0644 Signing time: Fri 30 May 2025 22:47:55 +0000 Manifest this update: Fri 30 May 2025 22:47:55 +0000 Manifest next update: Fri 06 Jun 2025 22:47:55 +0000 Files and hashes: 1: dLH8bMwnd13tH1lSWyh2Yci_6ig.crl (hash: YnyqzwgS94zvylXg+xUrQU1Mqq/hFqsOZlxFDhmdO2M=) 2: 6DB2ADE48D1411EB8DBF4B0CC4F9AE02.roa (hash: RjXIFOb4H/X8iiDE4pTuFeof6IEbmr1b61kbIaDDvIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.crl rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dLH8bMwnd13tH1lSWyh2Yci_6ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1610 (0x64a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91278AF, serialNumber=74B1FC6CCC27775DED1F59525B287661C8BFEA28 Validity Not Before: May 30 22:47:55 2025 GMT Not After : Jun 6 22:47:55 2025 GMT Subject: CN=683a359b-60ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:94:a2:28:f1:a0:34:8e:93:cc:24:e2:18:d1: b8:ae:8b:f7:96:f2:fb:c7:0d:28:6f:42:af:85:98: b7:7b:ed:66:e3:c2:6f:07:55:65:1a:19:89:11:d4: 34:d6:48:e5:d7:e9:b4:79:e2:4a:a4:7e:f8:c9:5a: ad:bc:56:21:3e:61:2e:b5:ec:ac:3e:06:bf:4c:62: b7:d3:c3:2b:4c:64:e0:f7:85:f1:0c:e6:6f:de:c9: 37:e4:ae:22:2b:d2:82:f7:e4:4e:29:0a:16:ea:d6: 3a:19:33:20:eb:11:59:92:f8:d6:f8:d6:54:f8:af: 0e:3a:88:e3:34:2b:f6:59:85:b9:63:dc:29:6d:56: ac:49:37:f7:51:70:be:36:b5:d8:41:d6:eb:1f:2f: d3:bb:8c:de:57:6a:91:53:f9:49:16:ed:0e:bf:68: 22:cf:3e:75:82:8b:c2:c5:ee:da:a9:2a:a4:13:83: 8f:5e:44:30:d6:15:70:e7:c9:f2:47:f5:59:58:42: 0a:cf:cd:d5:74:70:fd:04:bd:81:29:2a:35:61:f0: e0:2a:07:d0:4c:44:f2:79:ce:f3:92:42:30:ab:af: 10:68:68:e4:da:4a:ff:c0:96:7d:50:e8:8c:41:5d: ba:1f:fb:1b:d0:c9:46:36:ae:96:d0:f3:ae:b0:a4: 14:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:35:11:99:89:80:62:23:48:54:6C:14:48:57:F5:81:B6:7B:63:EA X509v3 Authority Key Identifier: keyid:74:B1:FC:6C:CC:27:77:5D:ED:1F:59:52:5B:28:76:61:C8:BF:EA:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dLH8bMwnd13tH1lSWyh2Yci_6ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:0b:e8:b4:1b:76:e5:0c:d0:c3:c8:e8:89:10:ca:bd:91:8a: 5c:7d:30:a4:93:7a:6c:8e:38:ec:72:ad:f9:4b:dc:58:11:7f: 9f:04:8b:f5:64:82:8f:6d:4b:90:8a:53:19:67:36:b0:4e:fb: 25:b1:89:7e:36:90:1a:89:bf:10:62:ea:c6:ad:11:ad:a6:fb: df:0d:e9:64:25:e3:60:04:87:5c:73:3a:15:aa:5e:69:7a:11: 30:e7:f4:50:6d:70:71:90:c0:88:d6:6c:5d:d4:e4:cc:62:b2: 40:de:a0:5b:c8:cd:13:b7:72:6e:5c:e3:09:b6:90:d3:0e:ef: 58:52:5d:20:d2:06:df:46:a1:dc:a2:be:7b:a4:2a:27:a3:e8: 73:1d:28:30:92:bc:10:fc:be:4c:df:af:77:1c:5b:2b:01:46: 71:03:79:c1:ca:2d:23:36:56:b8:40:25:63:49:4f:0a:7e:b5: 57:61:83:7d:eb:89:62:28:03:40:00:aa:b7:57:09:cb:ab:20: 6d:14:be:82:2c:6a:3f:40:ab:fb:0c:0a:16:20:d9:6d:c3:fe: f6:0a:e3:6e:a0:95:3c:69:0c:88:e2:ea:4f:e3:6d:3c:d4:f6: d4:c2:c8:e1:30:6a:56:95:b1:27:80:82:f5:fd:f5:f8:b1:e3: 0b:fe:d6:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc4QUYxMTAvBgNVBAUTKDc0QjFGQzZDQ0MyNzc3NURFRDFGNTk1MjVCMjg3NjYx QzhCRkVBMjgwHhcNMjUwNTMwMjI0NzU1WhcNMjUwNjA2MjI0NzU1WjAYMRYwFAYD VQQDEw02ODNhMzU5Yi02MGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJSiKPGgNI6TzCTiGNG4rov3lvL7xw0ob0KvhZi3e+1m48JvB1VlGhmJEdQ0 1kjl1+m0eeJKpH74yVqtvFYhPmEuteysPga/TGK308MrTGTg94XxDOZv3sk35K4i K9KC9+ROKQoW6tY6GTMg6xFZkvjW+NZU+K8OOojjNCv2WYW5Y9wpbVasSTf3UXC+ NrXYQdbrHy/Tu4zeV2qRU/lJFu0Ov2gizz51govCxe7aqSqkE4OPXkQw1hVw58ny R/VZWEIKz83VdHD9BL2BKSo1YfDgKgfQTETyec7zkkIwq68QaGjk2kr/wJZ9UOiM QV26H/sb0MlGNq6W0POusKQUWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDE1EZmJ gGIjSFRsFEhX9YG2e2PqMB8GA1UdIwQYMBaAFHSx/GzMJ3dd7R9ZUlsodmHIv+oo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzhBRi8xNkJCRDdCNDhE MTMxMUVCQTUxODNEMEJDNEY5QUUwMi9kTEg4Yk13bmQxM3RIMWxTV3loMlljaV82 aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RMSDhiTXduZDEzdEgxbFNXeWgyWWNpXzZpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzhBRi8xNkJCRDdCNDhEMTMxMUVCQTUxODNEMEJDNEY5QUUwMi9kTEg4Yk13bmQx M3RIMWxTV3loMlljaV82aWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzC+i0G3blDNDDyOiJEMq9kYpcfTCkk3psjjjscq35S9xYEX+fBIv1 ZIKPbUuQilMZZzawTvslsYl+NpAaib8QYurGrRGtpvvfDelkJeNgBIdcczoVql5p ehEw5/RQbXBxkMCI1mxd1OTMYrJA3qBbyM0Tt3JuXOMJtpDTDu9YUl0g0gbfRqHc or57pCono+hzHSgwkrwQ/L5M3693HFsrAUZxA3nByi0jNla4QCVjSU8KfrVXYYN9 64liKANAAKq3VwnLqyBtFL6CLGo/QKv7DAoWINltw/72CuNuoJU8aQyI4upP4208 1PbUwsjhMGpWlbEngIL1/fX4seML/taj -----END CERTIFICATE-----Generated at Sat May 31 16:36:45 2025 by rpki-client